🧰 Go

The items that name it 124

• ClioBitcoinBank 🏴‍☠️ (@ClioBitcoinBank) on X
  advisoryas classification.technologies2026-10-31
• “Black October” for AI Developer Platforms
  writeupas classification.technologies2026-10-30
• Critical Linux kernel flaw allows remote root attacks on MPTCP servers
  articleas classification.technologies2026-10-30
• CVE-2026-98432: Linux TCP Use-After-Free Risk and Patch Validation
  articleas classification.technologies2026-10-30
• A quiet week in infosec <.<
  articleas classification.technologies2026-10-29
• NIK C2: The new AI-enabled command-and-control framework
  writeupas classification.technologies2026-10-29
• The OpenSourceMalware Show #27
  talkas classification.technologies2026-10-29
• Pentesting: Twelve Caesars – Community Tools for Offensive Security
  articleas classification.technologies2026-10-27
• eMudhra, Brotli, and the Long Tail of a Security Fix
  articleas classification.technologies2026-10-26
• Brotlipocalypse
  writeupas classification.technologies2026-10-24
• OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found
  writeupas classification.technologies2026-10-24
• eMudhra CA Compromise: The Trust Stores You Didn't Patch | Endor Labs
  articleas classification.technologies2026-10-21
• Compromised eMudhra intermediate certificates
  advisoryas classification.technologies2026-10-21
• Hijacked Developer Account Used to Plant Stealer in OVHcloud CLI
  articleas classification.technologies2026-10-21
• A company that vouches for websites had secret keys so weak that 8 of them were cracked
  articleas classification.technologies2026-10-21
• Glassworm Hacks OVH Clouds CLI tool
  writeupas classification.technologies2026-10-19
• MemTensor Compromise: Poisoned MemOS Releases on npm and PyPI
  articleas classification.technologies2026-10-18
• Trail of Bits (@trailofbits) on X
  threadas affected products2026-10-16It is written here as Go (verified every download without a lockfile).

  verified every download without a lockfile

• 5 Tips for Managing Bazel Dependencies (Without Losing Friends) | Endor Labs
  articleas classification.technologies2026-10-16
• Why Your SCA is Always Wrong | Endor Labs
  articleas affected products2026-10-16It is written here as Go (exception: package management and compiler are integrated).

  exception: package management and compiler are integrated

• AI-Powered Espionage Campaign Targets Government Linux Infrastructure
  articleas classification.technologies2026-10-15
• Staying Evergreen: How we automated secure access and repo hygiene in a shared org
  articleas classification.technologies2026-10-15
• Trail of Bits (@trailofbits) on X
  threadas tools2026-10-15It is written here as Go (package manager; verified every download in Trail of Bits' tests without a lockfile).

  package manager; verified every download in Trail of Bits' tests without a lockfile

• Package managers have an integrity problem
  writeupas classification.technologies2026-10-14
• Trail of Bits (@trailofbits) on X
  toolas classification.technologies2026-10-09
• trhhubsd/ARTEX
  repoas classification.technologies2026-10-08
• Dark Web Informer (@DarkWebInformer) on X
  threadas classification.technologies2026-10-08
• tl;dr sec #349 - Vulns & Exploits in the AI Era, Package Manager Sandboxing, Testing AI Sandboxes
  articleas classification.technologies2026-10-08
• Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
  articleas classification.technologies2026-10-08
• Evolution of Web3 in Cloud Supply Chain Attacks
  articleas classification.technologies2026-10-07
• On the Reliability of LLM-Based Vulnerability Patching Benchmarks
  paperas classification.technologies2026-10-07
• MALFEX npm Malware Campaign: Three Payloads And An Adversary That Signs Their Work
  writeupas classification.technologies2026-10-05
• jiwoochris/artex-global
  repoas classification.technologies2026-10-03
• SequenceHash: multihashing for the rest of us
  writeupas classification.technologies2026-10-02
• MALFEX npm Attack Spreads Windows RAT, Steals Discord and Browser Data
  articleas classification.technologies2026-09-30
• Securing the Kubernetes Supply Chain: Introducing WizOS Helm Charts
  articleas classification.technologies2026-09-30
• Manny M. (Vicente Traditor Mancebo) 💀 (@sargexd) on X
  toolas classification.technologies2026-09-27
• Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes
  writeupas classification.technologies2026-09-23
• MemTensor npm and PyPI Packages Compromised in Credential-Stealing Supply Chain Attack
  writeupas classification.technologies2026-09-23
• https://github.com/akha-security/akca
  repoas classification.technologies2026-09-23
• Novel supplychain.local Go worm appears
  writeupas classification.technologies2026-09-23
• nealbridges/VulnHunter
  repoas classification.technologies2026-09-22
• Graphalgo campaign spreads to Terraform providers and Go Modules
  writeupas classification.technologies2026-09-22
• The Closed Quorum: Inside the First Reported Autonomous AI C2 Implant
  writeupas classification.technologies2026-09-22
• Zero-Trust Authorization and Discovery for Enterprise MCP
  paperas classification.technologies2026-09-18
• Post-Quantum: Lattice or Hash-Based (one question, two right answers)
  articleas classification.technologies2026-09-15
• ClearFake WebDAV infection chain delivers Amatera stealer, ZigCryptoStealer, and NetSupport Manager
  writeupas classification.technologies2026-09-08
• vet (SafeDep)
  repoas affected products2026-09-07

  Package manager ecosystem supported/scanned by vet

• ForgeGuardian
  repoas affected products2026-09-05
• Numbat
  repoas affected products2026-09-05

  version 1.26.6 or newer, used to install numbat via go install

• Introducing deny list egress policies for Harden-Runner
  articleas classification.technologies2026-09-02
• Lose Control Flow: Unauthenticated Tool Execution in Dolt MCP
  advisoryas classification.technologies2026-09-01
• age
  repoas classification.technologies2026-08-31
• The OpenSourceMalware Show #19
  talkas classification.technologies2026-08-28
• Dark Caracal Reloaded: GoCaracal — New Go Malware With Ethereum-Based C2 Fallback
  writeupas classification.technologies2026-08-26
• Customer Zero: Implementing Package Firewall at Endor Labs | Blog | Endor Labs
  articleas classification.technologies2026-08-25
• JFrog: Coding Agents Just Reopened Your Software Supply Chain Blind Spot
  articleas affected products2026-08-25
• Cybermes
  repoas classification.technologies2026-08-23
• MinIO Security Lab
  repoas classification.technologies2026-08-21
• The OpenSourceMalware Show #18
  talkas classification.technologies2026-08-21
• N4D Mesh Controller: New infrastructure, a UPX-packed agent labeled "go-titan," and how to hunt for it
  writeupas classification.technologies2026-08-20
• Yet another RCE in Gogs, but it's fixed this time!
  writeupas classification.technologies2026-08-19
• Windows Infostealer Hits npm and Ruby
  writeupas classification.technologies2026-08-19
• StubMaker RubyGems Campaign Delivers a Windows Infostealer
  writeupas classification.technologies2026-08-16
• Cariddi
  repoas classification.technologies2026-08-12
• Static Analysis Tools & Linters
  repoas classification.technologies2026-08-09
• aurscan
  repoas classification.technologies2026-08-08
• Mac Malware Drains Crypto Wallets Via Fake CAPTCHA Scam
  writeupas classification.technologies2026-08-06
• Nomos
  repoas classification.technologies2026-08-02
• Talaria
  repoas classification.technologies2026-07-31
• PolinRider Caused Dozens of npm, Go, PHP Compromises
  writeupas classification.technologies2026-07-31
• The 2026-07-28 MCP Specification: Stateless Core, MRTR, Header-Based Routing
  articleas classification.technologies2026-07-28
• Dalfox
  repoas classification.technologies2026-07-25
• gowitness
  repoas classification.technologies2026-07-23
• ChainVeil and ViteVenom are DPRK’s PolinRider Campaign
  writeupas affected products2026-07-17

  Ecosystem PolinRider spread into

• Socket: Operation Muck and Load
  writeupas classification.technologies2026-07-16
• Unauthenticated RCE in ArgoCD
  writeupas classification.technologies2026-07-11
• The OpenSourceMalware Show #12
  talkas classification.technologies2026-07-09
• PolinRider Jumps the Fence to Go, Packagist, npm, PyPI
  writeupas classification.technologies2026-07-08
• DataDog/pathfinding-labs
  repoas classification.technologies2026-07-04
• Socket: PolinRider
  writeupas classification.technologies2026-07-02
• Orca Security: Langflow RCE (CVE-2026-33017) Actively Exploited
  advisoryas classification.technologies2026-07-02
• Introducing GuardDog 3.0: new YARA rules engine, risk scoring, and sandboxing
  articleas classification.technologies2026-06-26
• Kogaro
  repoas classification.technologies2026-06-25
• From Code to Coverage (Part 6): What netlogon.log Sees That Event 1644 Never Will
  writeupas classification.technologies2026-06-24
• Armur-Ai/Pentest-Swarm-AI
  repoas classification.technologies2026-06-21
• watchTowr Labs: Splunk Enterprise CVE-2026-20253 Pre-Auth RCE via PostgreSQL Sidecar
  writeupas classification.technologies2026-06-12
• OpenSource Malware: Active Malware Campaigns in January-May 2026
  writeupas classification.technologies2026-06-12
• Active Malware Campaigns in January-May 2026
  writeupas classification.technologies2026-06-08
• portbuster1337/ArachneC2
  repoas classification.technologies2026-06-05
• State of Post Quantum Cryptography | Wiz Blog
  articleas affected products2026-05-28It is written here as Go (crypto/tls).

  Supported X25519MLKEM768 by default since version 1.24; 60% of observed Go installs use at least that version

• Threat Actor Targets Crypto Organizations | Wiz Blog
  writeupas classification.technologies2026-05-27
• OSV
  toolas classification.technologies2026-05-25
• Bumblebee
  repoas classification.technologies2026-05-24
• PentAGI
  repoas classification.technologies2026-05-23
• Socket: AI Has Taken Over Open Source
  articleas affected products2026-05-23

  Ecosystem covered by Socket's package database

• musana/CF-Hero
  repoas classification.technologies2026-05-21
• Socket: Popular Go Decimal Library Targeted by Long-Running Typosquat with DNS Backdoor
  writeupas classification.technologies2026-05-20
• Open ASM Platform
  repoas classification.technologies2026-05-17
• Bullying LLMs
  writeupas classification.technologies2026-05-13
• Socket: fsnotify Maintainer Dispute
  articleas classification.technologies2026-05-13
• knostic/OpenAnt
  repoas affected products2026-05-12

  supported language for scanning

• Betterleaks
  repoas classification.technologies2026-05-10
• Titus by Praetorian
  repoas classification.technologies2026-05-10
• DefenseClaw
  repoas classification.technologies2026-05-07
• CRA Compliance Lab
  repoas classification.technologies2026-05-06
• BufferZoneCorp Malicious Gems & Go Modules
  writeupas classification.technologies2026-05-06
• Microsoft Agent Governance Toolkit
  repoas classification.technologies2026-05-06
• CVE-2025-62878 — Critical Path Traversal in Rancher Local Path Provisioner (CVSS 10.0)
  advisoryas classification.technologies2026-02-10
• The Masked Namespace Vulnerability In Temporal CVE-2025-14986 | depthfirst
  writeupas classification.technologies2026-02-05
• PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182
  writeupas classification.technologies2025-12-10
• Lamperl pt 3 (Uploads, Downloads, Job Control)
  writeupas classification.technologies2025-12-08
• Esbuild
  writeupas classification.technologies2025-11-20
• Sysrv Infection (Linux Edition)
  writeupas classification.technologies2024-04-14
• VulnCheck - Outpace Adversaries
  toolas classification.technologies
• derailed/popeye
  toolas classification.technologies
• chainguard-dev/malcontent
  repoas classification.technologies
• target/strelka
  repoas tools

  Used to build the strelka-oneshot client application

• shai-hulud-detect: multi-ecosystem npm/PyPI/Composer/Crates/Go/Hex/RubyGems supply-chain worm scanner
  repoas classification.technologies
• Supply Chain Firewall (Datadog)
  repoas classification.technologies
• ossf/criticality_score
  repoas classification.technologies
• Betterleaks: Gitleaks creator's open-source secrets scanner successor
  articleas classification.technologies
• agent-egress-bench
  repoas affected products

  required to build the validator and runner; distribution golang packages may install an older release

• AWSHound — AWS BloodHound OpenGraph Collector
  repoas classification.technologies